File: //usr/lib/python3/dist-packages/certbot/_internal/plugins/__pycache__/webroot.cpython-310.pyc
o
6��a�9 � @ sJ d Z ddlZddlZddlZddlZddlmZ ddlmZ ddlmZ ddlm Z ddl
m Z ddl m
Z
dd l mZ dd
l mZ dd lmZ dd lmZ dd
lmZ ddlmZ ddlmZ ddlmZ ddl m Z ddl mZ ddl m Z e� e!�Z"dZ#dgZ$G dd� de j%ej&�Z&G dd� dej'�Z(G dd� dej'�Z)dd � Z*dS ) zWebroot plugin.� N)� DefaultDict)�Dict)�List)�Set)�
challenges)� crypto_util)�errors)�
interfaces)�cli)�"KeyAuthorizationAnnotatedChallenge)�
filesystem)�os)�ops)�util)�common)� safe_openz�<?xml version="1.0" encoding="UTF-8" ?>
<!--Generated by Certbot-->
<configuration>
<system.webServer>
<staticContent>
<mimeMap fileExtension="." mimeType="text/plain" />
</staticContent>
</system.webServer>
</configuration>
�@20c5ca1bd58fa8ad5f07a2f1be8b7cbb707c20fcb607a8fc8db9393952846a97c s� e Zd ZdZdZdZdd� Zedd� �Zdd � Z d
d � Z
� fd d
�Z dd� Z dd� Z
dd� Zdd� Zdd� Zd#dd�Zdd � Zd d � Zd d � Zd!d"� Z� ZS )$�
AuthenticatorzWebroot Authenticator.z Place files in webroot directoryz�Authenticator plugin that performs http-01 challenge by saving
necessary validation resources to appropriate paths on the file
system. It expects that there is some other HTTP server configured
to serve all files under specified web root ({0}).c C s | j �| �d��S )N�path)� MORE_INFO�format�conf��self� r �C/usr/lib/python3/dist-packages/certbot/_internal/plugins/webroot.py� more_info8 s zAuthenticator.more_infoc C s& |ddg t dd� |di tdd� d S )Nr z-wa public_html / webroot path. This can be specified multiple times to handle different domains; each domain will have the webroot path that preceded it. For instance: `-w /var/www/example -d example.com -d www.example.com -w /var/www/thing -d thing.net -d m.thing.net` (default: Ask))�default�action�help�mapa� JSON dictionary mapping domains to webroot paths; this implies -d for each entry. You may need to escape this from your shell. E.g.: --webroot-map '{"eg1.is,m.eg1.is":"/www/eg1/", "eg2.is":"/www/eg2"}' This option is merged with, but takes precedence over, -w / -d entries. At present, if you put webroot-map in a config file, it needs to be on a single line, like: webroot-map = {"example.com":"/var/www"}.)�_WebrootPathAction�_WebrootMapAction)�cls�addr r r �add_parser_arguments; s
�
�z"Authenticator.add_parser_argumentsc C s dS )Nz�The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.r )r �failed_achallsr r r � auth_hintM � zAuthenticator.auth_hintc C s t jgS �N)r �HTTP01)r �domainr r r �get_chall_prefS s z Authenticator.get_chall_prefc s. t � j|i |�� i | _t�t�| _g | _d S r) )�super�__init__�
full_roots� collections� defaultdict�set� performed�
_created_dirs�r �args�kwargs�� __class__r r r. W s
zAuthenticator.__init__c C s d S r) r r r r r �prepare^ r( zAuthenticator.preparec s$ � � |� � �� � fdd�|D �S )Nc s g | ]}� � |��qS r )�_perform_single)�.0�achallr r r �
<listcomp>f s z)Authenticator.perform.<locals>.<listcomp>)�
_set_webroots�_create_challenge_dirs)r �achallsr r r �performa s
zAuthenticator.performc C s� | � d�r#| � d�d }t�d|� |D ] }| � d��|j|� qd S tt| � d��� ��}|D ]0}|j| � d�vr`| �|j|�}z|� |� W n t
yQ Y nw |� d|� || � d�|j< q0d S )Nr ���z4Using the webroot path %s for all unmatched domains.r r ) r �logger�info�
setdefaultr+ �listr2 �values�_prompt_for_webroot�remove�
ValueError�insert)r rA � webroot_pathr= �known_webroots� new_webrootr r r r? h s.
��� � ��zAuthenticator._set_webrootsc C sH d }|d u r"|r| � ||�}|d u r| �|�}n| �|d�}|d u s|S )NT)�_prompt_with_webroot_list�_prompt_for_new_webroot)r r+ rN �webrootr r r rI ~ s
� �
z!Authenticator._prompt_for_webrootc C s^ d| � d� } tjd�|�dg| |dd�\}}|tjkr#t�d��|dkr)d S ||d S )
Nz--r TzSelect the webroot for {0}:zEnter a new webroot)�cli_flag�force_interactive�IEvery requested domain must have a webroot when using the webroot plugin.r � )� option_name� display_util�menur �CANCELr � PluginError)r r+ rN � path_flag�code�indexr r r rP � s
�
�z'Authenticator._prompt_with_webroot_listFc C s> t jtd�|�dd�\}}|tjkr|sd S t�d��t|�S )NzInput the webroot for {0}:T)rT rU )r �validated_directory�_validate_webrootr rX rZ r r[ )r r+ �
allowraiser] rR r r r rQ � s
�
�z%Authenticator._prompt_for_new_webrootc C s� | � d�}|s t�d��|�� D ]�\}}tj�|tj�tj j
��| j |< t �
d| j | � t�d�}zptt�| j | �d d� td�D ]X}tj�|�rLqCz:t�|d� | j�|� z tj||dddd � W n ttfy� } zt �d
� t �
d |� W Y d }~nd }~ww W qC ty� } z t�d � ||���d }~ww W t�|� nt�|� w tj s�tj�| j | d
�}tj� |�r�t � d| j | � d S t � d| j | � t |ddd��
}|�!t"� W d � n1 s�w Y qd S )Nr z�Missing parts of webroot configuration; please set either --webroot-path and --domains, or --webroot-map. Run with --help webroot for examples.z-Creating root challenges validation dir at %s� rC )�keyi� T)� copy_user�
copy_groupz3Unable to change owner and uid of webroot directory�
Error was: %sz=Couldn't create root for {0} http-01 challenge responses: {1}�
web.configzPA web.config file has not been created in %s because another one already exists.zGCreating a web.config file in %s to allow IIS to serve challenge files.�w� ��mode�chmod)#r r r[ �itemsr
r �join�normcaser r* �
URI_ROOT_PATHr/ rD �debugr �umask�sortedr � get_prefixes�len�isdir�mkdirr4 �append� copy_ownership_and_apply_mode�OSError�AttributeError�warningr �
POSIX_MODE�existsrE r �write�_WEB_CONFIG_CONTENT) r �path_map�namer � old_umask�prefix� exception�web_config_path�
web_configr r r r@ � sl
� ��
$
�
������� �� ���z$Authenticator._create_challenge_dirsc C s t j�||j�d��S )N�token)r
r rn �chall�encode)r � root_pathr= r r r �_get_validation_path� s z"Authenticator._get_validation_pathc C s� |� � \}}| j|j }| �||�}t�d|� t�d�}z%t|ddd��}|� |�
� � W d � n1 s7w Y W t�|� nt�|� w | j | � |� |S )Nz#Attempting to save validation to %srb �wbri rj )
�response_and_validationr/ r+ r� rD rq r rr r r r� r3 r$ )r r= �response�
validationr� �validation_pathr� �validation_filer r r r; � s
��z Authenticator._perform_singlec
C s0 |D ]R}| j �|jd �}|d urT| �||�}t�d|� t�|� | j| �|� t j
sTtj � |d�}tj �
|�rTt�|�}|tv rNt�d|� t�|� qt�d|� qg }| jr�| j�� }zt�|� W n$ ty� } z|�d|� t�d|� t�d| � W Y d } ~ nd } ~ ww | jsZ|| _t�d� d S ) Nz Removing %srg z4Cleaning web.config file generated by Certbot in %s.zQNot cleaning up the web.config file in %s because it is not generated by Certbot.r z3Challenge directory %s was not empty, didn't removerf zAll challenges cleaned up)r/ �getr+ r� rD rq r
rJ r3 r r} r rn r~ r � sha256sum�_WEB_CONFIG_SHA256SUMSrE r4 �pop�rmdirrz rL )
r rA r= r� r� r� r� � not_removedr �excr r r �cleanup� sD
� ��
���zAuthenticator.cleanup)F)�__name__�
__module__� __qualname__�__doc__� descriptionr r � classmethodr% r' r, r. r: rB r? rI rP rQ r@ r� r; r� �
__classcell__r r r8 r r - s(
:r c @ s e Zd ZdZddd�ZdS )r" z%Action class for parsing webroot_map.Nc sF t �|��� D ]\}� t� �� |j�� fdd�t�||�D �� qd S )Nc 3 s � | ]}|� fV qd S r) r )r< �d�rM r r � <genexpr>! s �
�z-_WebrootMapAction.__call__.<locals>.<genexpr>)�json�loadsrm r` � webroot_map�updater
� add_domains)r �parser� namespacer� �
option_string�domainsr r� r �__call__ s
��z_WebrootMapAction.__call__r) )r� r� r� r� r� r r r r r" s r" c s* e Zd ZdZ� fdd�Zddd�Z� ZS )r! z&Action class for parsing webroot_path.c s t � j|i |�� d| _d S )NF)r- r. �_domain_before_webrootr5 r8 r r r. ( s
z_WebrootPathAction.__init__Nc C s\ | j rt�d��|jr |jd }|jD ] }|j�||� qn|jr$d| _ |j�t|�� d S )NzPIf you specify multiple webroot paths, one of them must precede all domain flagsrC T) r� r r[ rM r� r� rF rx r` )r r� r� rM r� � prev_webrootr+ r r r r� , s �
�z_WebrootPathAction.__call__r) )r� r� r� r� r. r� r� r r r8 r r! % s r! c C s& t j�| �s
t�| d ��t j�| �S )z�Validates and returns the absolute path of webroot_path.
:param str webroot_path: path to the webroot directory
:returns: absolute path of webroot_path
:rtype: str
z% does not exist or is not a directory)r
r rv r r[ �abspathr� r r r r` > s r` )+r� �argparser0 r� �logging�typingr r r r �acmer �certbotr r r �certbot._internalr
�certbot.achallengesr �AnnotatedChallenge�certbot.compatr r
�certbot.displayr r rX �certbot.pluginsr � certbot.utilr � getLoggerr� rD r� r� �Pluginr �Actionr" r! r` r r r r �<module> s<
o